Unable to upload the NSX Upgrade Bundle (MUB) with error "Extracting Bundle Signature failed"
search cancel

Unable to upload the NSX Upgrade Bundle (MUB) with error "Extracting Bundle Signature failed"

book

Article ID: 429576

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

  • When attempting to upload the VMware NSX Management Upgrade Bundle (MUB), the upload process fails.
  • The NSX Manager user interface returns the following error message: 
      `Extracting Bundle Signature failed. Try again with correct upgrade bundle`

Cause

This issue occurs when the downloaded `.mub` file is corrupted, truncated, or modified during the download or file transfer process. The NSX Manager strictly validates the cryptographic signature of the upgrade bundle. If the SHA256 hash of the uploaded file does not exactly match the official hash published on the Broadcom Support Portal, the extraction and validation phase will fail to prevent a corrupted upgrade.

Resolution

This is a condition that may occur in a VMware NSX environment.

To resolve this issue, verify the integrity of the downloaded file and re-download it if necessary:

  1. Validate the SHA256 hash of the `.mub` file currently residing on your local machine or jumpbox.
    1. On Windows: Open PowerShell and run:
       `Get-FileHash .\VMware-NSX-upgrade-bundle-<version>.mub` 
    2. On Linux/macOS: Open a terminal and run:
      `sha256sum VMware-NSX-upgrade-bundle-<version>.mub`
  2. Compare the output hash against the official SHA256 hash documented on the Broadcom Support Portal download page for that specific exact NSX version.
    Example: The correct SHA256 hash for the NSX 4.2.3.2.0 MUB is `b5f86334146542e07b3c172c54cf29b0f198cd607584ae986e4cc7d1e00d25c8`

  3. If the hashes do not match, the file is corrupted. Delete the corrupted file.

  4. Re-download the upgrade bundle from the Broadcom Support Portal.It is recommended to use a different web browser or a dedicated download manager to prevent silent interruptions or timeouts during the large file download.

  5. Once downloaded, verify the SHA256 hash again before attempting to upload it to the NSX Manager. 

Subscribe to this knowledge article to be notified of any future updates to this issue.